8e602c406e31831833862a91682431f8_JaffaCakes118 | Triage

Sharing

General

Target

8e602c406e31831833862a91682431f8_JaffaCakes118
Size

97KB
MD5

8e602c406e31831833862a91682431f8
SHA1

822b12966167702556a21f3cddc9a613099c53f5
SHA256

988587edd613704b05b8cddc52dc2aba31cb829af690dc658a35d724932545e3
SHA512

2885fc7eac93648b8f513c759a6c2e9b789029461a7b6641f1df78a2a110a3d6e90d4baae94fc47df76a2f8acec843097f8b5fc46afba9d60d0654612e60b494
SSDEEP

1536:IfPhP2bqB2KcqqtEj1IGwEONHHX408LalDuEIOhgwdp/jeNBP:IHh+e0q76HXl82lh7hfp/jgP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e602c406e31831833862a91682431f8_JaffaCakes118

Files

8e602c406e31831833862a91682431f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

efc773589d3f24b0acb4323416a8a1cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
CharNextA

kernel32

GetModuleHandleA
OpenProcess
VirtualAlloc
RtlMoveMemory
lstrlenW
VirtualFree

Sections

.text
Size: 1024B - Virtual size: 530B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Uneejnrr
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE